AWS secures internet routing with RPKI plus security checks
Networking & Content Delivery Blog
AWS has implemented Resource Public Key Infrastructure (RPKI) to enhance internet routing security, addressing vulnerabilities in the Border Gateway Protocol (BGP) routing system.
- RPKI helps prevent unauthorized IP address advertisements by allowing networks to "sign" their IP block ownership
- As of May 2025, over 55.8% of internet traffic is protected by RPKI
- AWS uses a unique approach with multiple safety checks when implementing RPKI
- Safety checks include: • Predicting potential unintended impacts • Implementing phased router updates • Safeguarding authorization document creation • Building system redundancies
The goal is to protect internet-facing workloads and prevent potential routing disruptions caused by accidental or malicious IP address advertisements.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Apr 28
2025
2025
AWS Client VPN now supports Client Routes Enforcement
Apr 9
2025
2025
Enhanced Network Security Control: Flow Management with AWS Network Firewall
Jun 11
2025
2025
AWS Cloud WAN simplifies network operations with Security Group Referencing and enhanced DNS support
May 4
2025
2025
Building secure guardrails for Amazon ECS with AWS IAM and AWS CloudFormation Guard
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.